tribunal

MobileHackingCheatSheet

Basics on commands/tools/info on how to assess the security of mobile applications

burp-piper

Piper Burp Suite Extender plugin

psc

E2E encryption for multi-hop tty sessions or portshells + TCP/UDP port forward

nuclei

Fast and customizable vulnerability scanner based on simple YAML based DSL.

byp4xx

40X/HTTP bypasser in Go. Features: Verb tampering, headers, #bugbountytips, User-Agents, extensions, default credentials...

dalfox

🌙🦊 Dalfox is a powerful open-source XSS scanner and utility focused on automation.

ParamSpider

Mining URLs from dark corners of Web Archives for bug hunting/fuzzing/further probing

DNSGrep

Quickly Search Large DNS Datasets

progressbar

A really basic thread-safe progress bar for Golang applications

jaeles-signatures

Default signature for Jaeles Scanner

jaeles

The Swiss Army knife for automated Web Application Testing

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

Mitigating-Web-Shells

Guidance for mitigation web shells. #nsacyber

ffuf

Fast web fuzzer written in Go

anti-axelspringer-hosts

A hosts file which blocks all services from Axel Springer Verlag.

tpotce

🍯 T-Pot - The All In One Multi Honeypot Platform 🐝

wstg

The Web Security Testing Guide is a comprehensive Open Source guide to testing the security of web applications and web services.

upload-scanner

HTTP file upload scanner for Burp Proxy

awesome-burp-extensions

A curated list of amazingly awesome Burp Extensions

JSParser

notes

Burp Notes Extension is a plugin for Burp Suite that adds a Notes tab. The tool aims to better organize external files that are created during penetration testing.

burp-dump

A Burp plugin to dump HTTP(S) requests/responses to a file system

htbenum

A Linux enumeration script for Hack The Box

syncthing

Open Source Continuous File Synchronization

Ghazi

Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab Will Replace Every GET or POST Parameters With Selected TAB in "Proxy" or "Repeater" TAB

interestingFileScanner

Burp extension

AWSBucketDump

Security Tool to Look For Interesting Files in S3 Buckets

LinkFinder

A python script that finds endpoints in JavaScript files

commonspeak

Content discovery wordlists generated using BigQuery

awesome-bug-bounty

A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.